CN111680334B - Disk security access method, device, equipment and medium - Google Patents

Abstract

The invention discloses a disk security access method, device, equipment, and medium. The method includes: when a disk is detected to be loaded, reading the disk information file of the target disk on the disk, wherein the disk information file contains Including the target signature and the target device ID; verifying the target signature according to preset rules; if the target signature verification is passed, then judging the target device ID in the disk information file and the current target edge device Whether the IDs are consistent; if they are consistent, normal access operations are allowed to the target disk. After the verification is passed, the target disk can be accessed normally. If the verification passes, it indicates that the target information in the disk information file has not been modified. If the verification passes, it indicates that the target information in the disk information file has not been modified. The information has been modified to ensure secure disk access and improve device security.

Description

Disk security access method, device, equipment and medium

technical field

The present invention relates to the technical field of information security, in particular to a disk security access method, device, equipment and medium.

Background technique

With the vigorous development of shared computing, many computing, bandwidth, and storage resources are slowly evolving from centralized servers to users' homes. An edge node, the enterprise returns a certain reward to the user according to the quality of the resources provided by the user. When the node provides storage capacity, the UUID (Universally Unique Identifier) of the disk will be stored in the disk information file. This UUID is a unique and non-repetitive string generated in the background according to certain rules. In the disk information file on the device, once the UUID is modified, the data in the disk will be invalid, and even affect the data on other devices, such as changing to a UUID that is consistent with the UUID on other devices. There will be two copies of the same UUID, which will affect the overall service.

Contents of the invention

In view of this, the object of the present invention is to provide a disk security access method, device, device, and medium, aiming at solving the problems of data invalidation and equipment malfunction caused by modification of data in a disk information file.

In order to achieve the above object, the present invention proposes a disk security access method, which is applied to the target edge device, and the method includes:

When detecting that there is a disk on the disk, read the disk information file of the target disk on the disk, wherein the disk information file includes the target signature and the target device ID;

Verifying the target signature according to preset rules;

If the target signature verification is passed, it is judged whether the target device ID in the disk information file is consistent with the current ID of the target edge device;

If the target device ID in the disk information file is consistent with the current ID of the target edge device, normal access operations to the target disk are allowed.

Optionally, after the judging whether the target device ID in the disk information file is consistent with the current ID of the target edge device, further includes:

If the target device ID in the disk information file is inconsistent with the current ID of the target edge device, then determine whether to allow normal access to the target disk according to the current application scenario of the target disk.

Optionally, after the normal access operation to the target disk is allowed, the method further includes:

Obtain disk information reported by the target disk at preset time intervals.

Optionally, the process of reading the disk information file of the target disk on the disk when it is detected that there is a disk on the disk further includes:

If the disk information file of the target disk of the last disk is not read, a UUID request is initiated to the corresponding local background, so that the background generates a target UUID corresponding to the target disk according to the UUID request;

generating disk information corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device;

The disk information is saved to the created disk file to obtain the target disk file.

Optionally, the generating the disk information corresponding to the target disk according to the preset rule, the target UUID and the current ID of the target edge device includes:

generating a target signature corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device;

The target UUID, the current ID, and the target signature are stored in a preset format to obtain disk information corresponding to the target disk.

Optionally, the generating the target signature corresponding to the target disk according to the preset rule, the target UUID and the current ID of the target edge device includes:

Obtain a first character string and a second character string according to the first preset rule and the target UUID;

obtaining a third character string according to a second preset rule, the first character string, and the second character string;

generating a fourth character string by using the first preset algorithm, the second preset algorithm and the third character string;

generating a fifth character string by using the second preset algorithm and the target UUID;

performing an XOR operation on the fourth character string and the fifth character string to obtain a target character string;

A target signature corresponding to the target disk is generated by using the first preset algorithm, the second preset algorithm, the target UUID, the current ID, and the target character string.

Optionally, the generating a fourth character string by using the first preset algorithm, the second preset algorithm and the third character string includes:

Using the SHA512 algorithm to perform operations on the third character string to obtain a target operation value;

The MD5 algorithm is used to perform an operation on the target operation value to obtain a fourth character string.

In order to achieve the above purpose, the present invention further proposes a disk security access device, which is applied to the target edge device, and the device includes:

The file reading module is used to read the disk information file of the target disk on the disk when it is detected that there is a disk on the disk, wherein the disk information file includes the target signature and the target device ID;

a signature verification module, configured to verify the target signature according to preset rules;

The ID verification module is used to determine whether the target device ID in the disk information file is consistent with the current ID of the target edge device when the target signature verification is passed;

The disk access module is configured to allow normal access to the target disk when the target device ID in the disk information file is consistent with the current ID of the target edge device.

In order to achieve the above object, the present invention further proposes a disk security access device, comprising:

memory and processor;

A disk security access program that can run on the processor is stored in the memory, and when the disk security access program is executed by the processor, the aforementioned method for disk security access is implemented.

To achieve the above object, the present invention further proposes a computer-readable storage medium, on which a disk security access program is stored, and the disk security access program can be executed by one or more processors to Realize the aforementioned disk security access method.

In order to achieve the above object, the present invention further provides a computer program product, the computer program product includes computer instructions, and when it is run on a computer, the computer can execute the aforementioned disk security access method.

It can be seen that when the present invention detects that there is a disk on the disk, it reads the disk information file of the target disk on the disk, wherein the disk information file includes the target signature and the target device ID, and then according to the preset rules, the target The signature is checked, and if the target signature check is passed, it is judged whether the target device ID in the disk information file is consistent with the current ID of the target edge device, if the target device ID in the disk information file is consistent with If the current IDs of the target edge devices are consistent, normal access operations on the target disk are allowed. It can be seen that, after the present invention detects that there is a disk on the disk, it first reads the disk information file of the target disk on the disk, and checks the target signature in the disk information file according to the preset rules. After passing, judge whether the target device ID in the disk information file is consistent with the current ID of the target edge device, and when the target device ID in the disk information file is consistent with the current ID of the target edge device , normal access operations can be performed on the target disk, if the verification passes, it indicates that the target information in the disk information file has not been modified, and if the verification fails, it indicates that the target information in the disk information file has been modified, In this way, the safe access of the disk can be guaranteed, and the security performance of the device can be improved.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

Fig. 1 is a flow chart of a disk security access method disclosed by the present invention;

FIG. 2 is a flow chart of a specific disk security access method disclosed by the present invention;

FIG. 3 is a flow chart of a specific disk security access method disclosed by the present invention;

Fig. 4 is a schematic structural diagram of a disk security access device disclosed by the present invention;

Fig. 5 is a structural diagram of a disk security access device disclosed in the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above drawings are used to distinguish similar objects, and not necessarily Used to describe a specific sequence or sequence. It is to be understood that the terms so used are interchangeable under appropriate circumstances such that the embodiments described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "having", as well as any variations thereof, are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements is not necessarily limited to the expressly listed instead, may include other steps or elements not explicitly listed or inherent to the process, method, product or apparatus.

It should be noted that the descriptions involving "first", "second", etc. in the present invention are only for descriptive purposes, and should not be understood as indicating or implying their relative importance or implicitly indicating the number of indicated technical features . Thus, the features defined as "first" and "second" may explicitly or implicitly include at least one of these features. In addition, the technical solutions of the various embodiments can be combined with each other, but it must be based on the realization of those skilled in the art. When the combination of technical solutions is contradictory or cannot be realized, it should be considered that the combination of technical solutions does not exist , nor within the scope of protection required by the present invention.

At present, when a node provides storage capacity, the UUID of the disk will be stored in the disk information file. This UUID is a unique and non-repetitive character string generated in the background according to certain rules. The UUID is stored in the disk information file on the user device. , once the UUID is modified, it will cause the data in the disk to be invalid, and even affect the data on other devices. For example, if it is changed to a UUID that is consistent with the UUID on other devices, there will be two copies of the same UUID in the background , causing the overall service to be affected. In view of this, the present invention proposes a disk security access method, which can ensure the security access of the disk and improve the security performance of the device.

Referring to Fig. 1, the embodiment of the present invention discloses a disk security access method, which is applied to a target edge device, and the method includes:

Step S11: When it is detected that a disk is loaded, read the disk information file of the loaded target disk, wherein the disk information file includes a target signature and a target device ID.

When it is detected that there is a disk on the disk, it is necessary to read the disk information file of the target disk on the disk, so as to verify the information in the disk information file, so as to determine whether the local can perform normal access operations on the target disk . Wherein, the disk information file includes a target signature, a target device ID, and a target UUID of the target disk, and the target signature is a signature obtained by processing the target device ID and the target UUID using preset rules.

In the process of using preset rules to process the target device ID and the target UUID to obtain the target signature, the preset rules can be determined according to the actual situation, for example, first perform a hash operation on the target UUID, The hash operation is performed again on the obtained operation result together with the target device ID to obtain the target signature. Or, take the odd-numbered and even-numbered bits of the target UUID to form strings str1 and str2 respectively; reverse the order of str1 and then concatenate with str2 to form a new string; take the MD5 and SHA512 values of the new string as str3; combine str3 with the target UUID XOR operation is performed on the MD5 value of , and it is used as a key; MD5 and SHA512 values are taken together for the key, the target UUID and the target device ID to obtain the target signature.

Step S12: Verifying the target signature according to preset rules.

After the disk information file is read, the target signature is verified according to preset rules, so as to determine whether the information in the disk information file has been modified. Wherein, the preset rule is the same as the rule for generating the target signature.

Verifying the target signature according to preset rules includes: using preset rules to process the target device ID and target UUID in the disk information file to obtain a reference signature; combining the reference signature with the target signature Comparing, if the reference signature is consistent with the target signature, it is determined that the target signature has passed the verification, indicating that the target device ID and the target UUID have not been modified; if the reference signature is consistent with the target If the signatures are inconsistent, it is determined that the target signature verification fails, indicating that the target device ID or the target UUID has been modified.

Step S13: If the target signature verification is passed, then judge whether the target device ID in the disk information file is consistent with the current ID of the target edge device.

After the verification of the target signature, if the verification of the target signature is passed, it is also necessary to judge whether the target device ID in the disk information file is consistent with the current ID of the target edge device, so as to determine whether to allow Perform normal access operations on the target disk. In the specific implementation process, some disks can only be used on specific edge devices in some usage scenarios, so after the target signature is passed, it is also necessary to determine the target device ID in the disk information file and the Whether the current ID of the target edge device is consistent.

Step S14: If the target device ID in the disk information file is consistent with the current ID of the target edge device, allow normal access to the target disk.

After judging whether the target device ID in the disk information file is consistent with the current ID of the target edge device, if the target device ID in the disk information file is consistent with the current ID of the target edge device, allow the The target disk performs normal access operations. If the target device ID in the disk information file is inconsistent with the current ID of the target edge device, then determine whether to allow normal access to the target disk according to the current application scenario of the target disk. If the target disk is not allowed to be used on devices other than the edge device corresponding to the target device ID in the current adaptation scenario, the target edge device is not allowed to perform a normal access operation on the target disk. If the target disk is allowed to be used on a device other than the edge device corresponding to the target device ID in the current adaptation scenario, the target edge device is allowed to perform a normal access operation on the target disk.

It can be seen that when the present invention detects that there is a disk on the disk, it reads the disk information file of the target disk on the disk, wherein the disk information file includes the target signature and the target device ID, and then according to the preset rules, the target The signature is checked, and if the target signature check is passed, it is judged whether the target device ID in the disk information file is consistent with the current ID of the target edge device, if the target device ID in the disk information file is consistent with If the current IDs of the target edge devices are consistent, normal access operations on the target disk are allowed. It can be seen that, after the present invention detects that there is a disk on the disk, it first reads the disk information file of the target disk on the disk, and checks the target signature in the disk information file according to the preset rules. After passing, judge whether the target device ID in the disk information file is consistent with the current ID of the target edge device, and when the target device ID in the disk information file is consistent with the current ID of the target edge device , normal access operations can be performed on the target disk, if the verification passes, it indicates that the target information in the disk information file has not been modified, and if the verification fails, it indicates that the target information in the disk information file has been modified, In this way, the safe access of the disk can be guaranteed, and the security performance of the device can be improved.

Referring to Figure 2, the embodiment of the present invention discloses a specific disk security access method, which is applied to the target edge device, and the method includes:

Step S21: When it is detected that a disk is loaded, read the disk information file of the loaded target disk, wherein the disk information file includes a target signature and a target device ID.

Step S22: If the disk information file is read, verify the target signature according to preset rules.

Step S23: If the target signature verification is passed, then judge whether the target device ID in the disk information file is consistent with the current ID of the target edge device.

Step S24: If the target device ID in the disk information file is consistent with the current ID of the target edge device, allow normal access to the target disk.

After judging whether the target device ID in the disk information file is consistent with the current ID of the target edge device, if the target device ID in the disk information file is consistent with the current ID of the target edge device, allow the The target disk performs normal access operations. If not, you can see whether the application scenario allows it. If it is allowed, it can be regarded as normal, allowing normal access operations to the target disk. The target disk performs normal access operations. If the target signature verification fails, the status of the target disk may be marked as abnormal, and normal local access to the target disk is not allowed. After allowing the normal access operation to the target disk, it also includes: obtaining disk information reported by the target disk at preset time intervals, wherein the disk information may include the target UUID, total capacity and The remaining capacity.

Step S25: If the disk information file of the uploaded target disk is not read, initiate a UUID request to the corresponding local background, so that the background generates a target UUID corresponding to the target disk according to the UUID request.

In the specific implementation process, if the disk information file of the target disk on the disk is not read, and the target disk is on the disk for the first time, it is necessary to initiate a UUID request to the corresponding local background, so that the background can according to The UUID request generates a target UUID corresponding to the target disk.

Step S26: Generate disk information corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device.

After the background generates the target UUID, it needs to generate disk information corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device. The generating the disk information corresponding to the target disk according to the preset rule, the target UUID and the current ID of the target edge device includes: according to the preset rule, the target UUID and the target The current ID of the edge device generates a target signature corresponding to the target disk; the target UUID, the current ID, and the target signature are stored in a preset format to obtain disk information corresponding to the target disk.

Specifically, the generating the target signature corresponding to the target disk according to the preset rule, the target UUID and the current ID of the target edge device includes: according to the first preset rule and the target UUID, Obtain a first character string and a second character string; obtain a third character string according to a second preset rule, the first character string and the second character string; use the first preset algorithm and the second preset algorithm and the third character string, generating a fourth character string; using the second preset algorithm and the target UUID to generate a fifth character string; performing an XOR operation on the fourth character string and the fifth character string, Obtaining a target string; using the first preset algorithm, the second preset algorithm, the target UUID, the current ID, and the target string to generate a target signature corresponding to the target disk. Specifically, it may include: taking the odd-numbered bits of the target UUID to form the first character string, taking the even-numbered bits of the target UUID to form the second character string; combining the first character string in reverse order with the second character string string splicing to obtain the third character string; use the SHA512 algorithm to operate the third character string to obtain the target calculation value, and use the MD5 algorithm to perform calculation on the target calculation value to obtain the fourth character string; use the MD5 algorithm to calculate the target calculation value The target UUID is operated to generate the fifth character string; the fourth character string and the fifth character string are XORed to obtain the target character string; the target UUID, the target device ID and the target character string are together Splice into a long character string, use the SHA512 algorithm and the MD5 algorithm to process the long character string again, and obtain the target signature, which is expressed by the formula as the target signature sign=MD5SHA512(device_id+UUID+key), where device_id is the target The target device ID of the edge device, key represents the target string. For example, if the target UUID is abcdef, the first character string is ace, the second character string is bdf, and the third character string is ecabdf. Then store the target UUID, the target device ID, and the target signature according to a preset format to obtain disk information corresponding to the target disk. Specifically, it can be stored according to device_id\001uuid\001sign, wherein, \001 is the delimiter.

Step S27: Save the disk information to the created disk file to obtain the target disk file.

After obtaining the disk information, save the disk information in the created disk file to obtain a target disk file.

Referring to FIG. 3 , it is a flow chart of disk security access. After the disk is loaded, try to read the disk information file of the disk to determine whether there is a disk information file, if there is a disk information file, then read the disk information file, and perform the signature in the disk information file Check, if the verification signature is passed, then judge whether the device ID in the disk information file is consistent with the ID of the current device, if they are consistent, mark the state of the disk as normal, if not, mark the state of the disk as abnormal , and regularly report disk information through heartbeat. If there is no disk information file, apply for the corresponding UUID from the background, and calculate the disk information signature according to the preset rules and the UUID, generate disk information, and save it in the file to obtain the disk information file, and store the disk information Status is marked OK.

Referring to Figure 4, the embodiment of the present invention discloses a disk security access device, which is applied to the target edge device, including:

The file reading module 11 is used to read the disk information file of the target disk on the disk when it is detected that there is a disk on the disk, wherein the disk information file includes the target signature and the target device ID;

A signature verification module 12, configured to verify the target signature according to preset rules;

The ID verification module 13 is used to determine whether the target device ID in the disk information file is consistent with the current ID of the target edge device when the target signature verification is passed;

The disk access module 14 is configured to allow normal access to the target disk when the target device ID in the disk information file is consistent with the current ID of the target edge device.

It can be seen that when the present invention detects that there is a disk on the disk, it reads the disk information file of the target disk on the disk, wherein the disk information file includes the target signature and the target device ID, and then according to the preset rules, the target The signature is checked, and if the target signature check is passed, it is judged whether the target device ID in the disk information file is consistent with the current ID of the target edge device, if the target device ID in the disk information file is consistent with If the current IDs of the target edge devices are consistent, normal access operations on the target disk are allowed. It can be seen that, after the present invention detects that there is a disk on the disk, it first reads the disk information file of the target disk on the disk, and checks the target signature in the disk information file according to the preset rules. After passing, judge whether the target device ID in the disk information file is consistent with the current ID of the target edge device, and when the target device ID in the disk information file is consistent with the current ID of the target edge device , normal access operations can be performed on the target disk, if the verification passes, it indicates that the target information in the disk information file has not been modified, and if the verification fails, it indicates that the target information in the disk information file has been modified, In this way, the safe access of the disk can be guaranteed, and the security performance of the device can be improved.

In a specific implementation process, the disk security access device also includes:

An access operation determining module, configured to determine whether to allow normal access to the target disk according to the current application scenario of the target disk when the target device ID in the disk information file is inconsistent with the current ID of the target edge device access operations.

In a specific implementation process, the disk security access device also includes:

The disk information obtaining module is configured to obtain the disk information reported by the target disk at preset time intervals.

Specifically, the disk security access device also includes:

The UUID application module is used to initiate a UUID request to the local corresponding background when the disk information file of the target disk on the disk is not read, so that the background generates a target corresponding to the target disk according to the UUID request UUID;

A disk information generating module, configured to generate disk information corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device;

The disk file generation module is used to save the disk information into the created disk file to obtain the target disk file.

Wherein, the disk information generation module includes:

A target signature generating submodule, configured to generate a target signature corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device;

The disk information generating submodule is used to store the target UUID, the current ID and the target signature in a preset format to obtain disk information corresponding to the target disk.

The target signature submodule may specifically include:

a first character string generating unit, configured to obtain a first character string and a second character string according to a first preset rule and the target UUID;

a second character string generating unit, configured to obtain a third character string according to a second preset rule, the first character string, and the second character string;

a third character string generating unit, configured to generate a fourth character string by using the first preset algorithm, the second preset algorithm, and the third character string;

A fourth character string generating unit, configured to generate a fifth character string by using the second preset algorithm and the target UUID;

The fifth character string generating unit is used to perform XOR operation on the fourth character string and the fifth character string to obtain a target character string;

A target signature generating unit, configured to generate a target signature corresponding to the target disk by using the first preset algorithm, the second preset algorithm, the target UUID, the current ID, and the target character string.

The third character string generation unit is specifically configured to use the SHA512 algorithm to operate on the third character string to obtain a target operation value; to use the MD5 algorithm to perform operation on the target operation value to obtain a fourth character string.

Further, referring to FIG. 5 , the embodiment of the present invention also discloses a disk security access device 20 , including: a processor 21 and a memory 22 .

The memory 22 stores a disk security access program that can run on the processor 21 , and when the disk security access program is executed by the processor 21 , the aforementioned disk security access method is implemented.

Wherein, regarding the specific process of the above-mentioned disk security access method, reference may be made to the corresponding content disclosed in the foregoing embodiments, and details are not repeated here.

Wherein, the memory 22 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, hard disk, multimedia card, card type memory (for example, SD or DX memory, etc.), magnetic memory, magnetic disk, optical disk, etc. The storage 22 may be an internal storage unit of the disk security access device 20 in some embodiments, such as a hard disk of the disk security access device 20 . Memory 22 also can be the external storage device of disk security access device 20 in other embodiments, such as the plug-in hard disk equipped on disk security access device 20, smart memory card (Smart Media Card, SMC), secure digital (Secure Digital) Digital, SD) card, flash memory card (Flash Card), etc. Further, the memory 22 may also include both an internal storage unit of the disk security access device 20 and an external storage device. The memory 22 can not only be used to store application software and various data installed in the disk security access device 20, but also can be used to temporarily store data that has been output or will be output.

In some embodiments, the processor 21 can be a central processing unit (Central Processing Unit, CPU), a controller, a microcontroller, a microprocessor or other data processing chips, which are used to run program codes stored in the memory 22 or process data.

In addition, the disk security access device 20 also includes a bus 23, and the bus 23 may be a peripheral component interconnect standard (PCI for short) bus or an extended industry standard architecture (EISA for short) bus wait. The bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in FIG. 5 , but it does not mean that there is only one bus or one type of bus.

Further, the disk security access device 20 may also include a network interface 24, and the network interface 24 may optionally include a wired interface and/or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which are usually used in A communication connection is established between the disk security access device 20 and other electronic devices.

Optionally, the disk security access device 20 may also include a user interface 25, the user interface may include a display (Display), an input unit such as a keyboard (Keyboard), and optionally the user interface may also include a standard wired interface or a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode, organic light-emitting diode) touch device, and the like. Wherein, the display may also be appropriately referred to as a display screen or a display unit, and is used for displaying information processed in the disk security access device 20 and for displaying a visualized user interface.

FIG. 5 only shows the disk security access device 20 with components 21-25. Those skilled in the art can understand that the structure shown in FIG. Fewer or more components, or combinations of certain components, or different arrangements of components.

Further, the embodiment of the present invention also discloses a computer-readable storage medium,

It is used to save the disk security access program, wherein when the disk security access program is executed by the processor, the disk security access method disclosed in the foregoing embodiments is implemented.

Regarding the specific process of the above disk security access method, reference may be made to the corresponding content disclosed in the foregoing embodiments, and details are not repeated here.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented using software, it may be implemented in whole or in part in the form of a computer program product.

The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, all or part of the processes or functions according to the embodiments of the present invention will be generated. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server, or data center Transmission to another website site, computer, server, or data center by wired (eg, coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (eg, infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be stored by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The available medium may be a magnetic medium (for example, a floppy disk, a hard disk, or a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a Solid State Disk (SSD)).

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or part of the contribution to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-OnlyMemory), random access memory (RAM, Random Access Memory), magnetic disk or optical disc and other media that can store program codes.

It should be noted that the serial numbers of the above embodiments of the present invention are only for description, and do not represent the advantages and disadvantages of the embodiments. And herein the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, apparatus, article or method comprising a set of elements includes not only those elements, but also includes not expressly included other elements listed, or also include elements inherent in the process, apparatus, article, or method. Without further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, apparatus, article or method comprising that element.

The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process conversion made by using the description of the present invention and the contents of the accompanying drawings, or directly or indirectly used in other related technical fields , are all included in the scope of patent protection of the present invention in the same way.

Claims (10)

1. A disk security access method, characterized in that being applied to a target edge device, said method comprising: When it is detected that there is a disk on the disk, read the disk information file of the target disk on the disk, wherein the disk information file includes the target signature, the target UUID and the target device ID of the target disk, and the target signature is A signature obtained by processing the target device ID and the target UUID using preset rules; verifying the target signature according to the preset rule; If the target signature verification is passed, it is judged whether the target device ID in the disk information file is consistent with the current ID of the target edge device; If the target device ID in the disk information file is consistent with the current ID of the target edge device, normal access operations to the target disk are allowed. 2. The disk security access method according to claim 1, wherein after said judging whether the target device ID in the disk information file is consistent with the current ID of the target edge device, further comprising: If the target device ID in the disk information file is inconsistent with the current ID of the target edge device, then determine whether to allow normal access to the target disk according to the current application scenario of the target disk. 3. The disk security access method according to claim 1, further comprising: Obtain disk information reported by the target disk at preset time intervals. 4. The disk security access method according to any one of claims 1 to 3, characterized in that, in the process of reading the disk information file of the target disk on the disk when it is detected that there is a disk on the disk, the include: If the disk information file of the target disk of the last disk is not read, a UUID request is initiated to the corresponding local background, so that the background generates a target UUID corresponding to the target disk according to the UUID request; generating disk information corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device; The disk information is saved to the created disk file to obtain the target disk file. 5. The disk security access method according to claim 4, wherein the disk information corresponding to the target disk is generated according to the preset rule, the target UUID and the current ID of the target edge device ,include: generating a target signature corresponding to the target disk according to the preset rule, the target UUID, and the current ID of the target edge device; The target UUID, the current ID, and the target signature are stored in a preset format to obtain disk information corresponding to the target disk. 6. The disk security access method according to claim 5, wherein the target signature corresponding to the target disk is generated according to the preset rule, the target UUID and the current ID of the target edge device ,include: Obtain a first character string and a second character string according to the first preset rule and the target UUID; obtaining a third character string according to a second preset rule, the first character string, and the second character string; generating a fourth character string by using the first preset algorithm, the second preset algorithm and the third character string; generating a fifth character string by using the second preset algorithm and the target UUID; performing an XOR operation on the fourth character string and the fifth character string to obtain a target character string; A target signature corresponding to the target disk is generated by using the first preset algorithm, the second preset algorithm, the target UUID, the current ID, and the target character string. 7. The disk security access method according to claim 6, wherein said generating a fourth character string using the first preset algorithm, the second preset algorithm and the third character string comprises: Using the SHA512 algorithm to perform operations on the third character string to obtain a target operation value; The MD5 algorithm is used to perform an operation on the target operation value to obtain a fourth character string. 8. A disk security access device, characterized in that it is applied to a target edge device, and the device comprises: The file reading module is used to read the disk information file of the target disk on the disk when it is detected that there is a disk on the disk, wherein the disk information file includes the target signature, the target UUID of the target disk and the target device ID, the target signature is a signature obtained by processing the target device ID and the target UUID using preset rules; a signature verification module, configured to verify the target signature according to the preset rules; The ID verification module is used to determine whether the target device ID in the disk information file is consistent with the current ID of the target edge device when the target signature verification is passed; The disk access module is configured to allow normal access to the target disk when the target device ID in the disk information file is consistent with the current ID of the target edge device. 9. A disk security access device, characterized in that, comprising: memory and processor; A disk security access program that can run on the processor is stored in the memory, and when the disk security access program is executed by the processor, the disk security access method according to any one of claims 1 to 7 is implemented . 10. A computer-readable storage medium, characterized in that, a disk security access program is stored on the computer-readable storage medium, and the disk security access program can be executed by one or more processors, so as to realize the The disk security access method described in any one of 1 to 7.

Images